Information Systems Security Engineer

Leidos•Linthicum, MD

2d•Onsite

About The Position

Leidos is seeking an Information Systems Security Engineer to support their customer onsite. The ISSE will perform technical security assessments of computing environments to identify vulnerabilities, non-compliance with IA standards and regulations, and recommend mitigation strategies. This includes validating system security requirements, designing and integrating IA and security systems, building IA into operational environments, assisting architects and developers with security functionality, supporting security architecture development, enforcing trusted relations, assessing and mitigating system security threats throughout the program lifecycle, and contributing to security planning, assessment, risk analysis, risk management, certification, and awareness activities. The role also involves reviewing C&A documentation for completeness and compliance.

Requirements

Active TS/SCI with Polygraph clearance.
Bachelor’s degree from an accredited university ideally in Computer Science, Information Assurance, Information Security System Engineering or related field with a minimum of 7+ years of experience as an Information Systems Security Engineer (ISSE) or Network Engineer on programs and/or contracts with the customer space.
4 additional years of experience in lieu of Technical Degree will be accepted.
CASP+ OR CISSP certification.
Strong writing skills.
Confidence and ability to present briefing to senior level DoD officials in both prepared briefings and/or in ad hoc discussions.
Working knowledge of security/ or network components, i.e. routers, firewalls, IPS, IDS, etc.
Experience in identifying, researching, characterizing, and documenting security weaknesses related to operating systems, software applications, firmware, network hardware components, as well as network architecture design and documented policies and procedures.
Experience developing and documenting system security requirements and conducting requirements gap analysis.
Knowledge of, and practical experience with the NIST Special Publications 800 Series, CNSSI 1253, and DoD 8500.
Experience with network technologies and the ability to demonstrate knowledge of network protocols, communications systems and architectures.
Significant hands on experience implementing security and/or network components, i.e. routers, firewalls, IPS, IDS, etc.
Ability to work independently within a schedule and with little direction.

Responsibilities

Perform, or review, technical security assessments of computing environments to identify points of vulnerability, non-compliance with established IA standards and regulations and recommended mitigation strategies.
Validate and verify system security requirements definitions and analysis and establish system security design.
Design, develop, implement and/or integrate IA and security systems and system components including those for networking, computing and enclave environment to include those with multiple enclaves and with differing data protection/classification requirements.
Build IA into systems deployed to operation environments.
Assist architects and systems developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Agency security policy and enterprise solutions.
Support the building of security architectures.
Enforce the design and implementation of trusted relations among external systems and architecture.
Assess and mitigate system security threats/risk throughout the program life cycle.
Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations.
Review C&A documentation, providing feedback on completeness and compliance of its content.